Hacker News Reader

> The real mistake was to connect such food critical equipment to the internet. I don't know who dared to do that, this has been part of the common knowledge for a while now.

Ive got to disagree there, the mistake is in it not being readonly accessible. Monitoring fridges in such a setting is one of the few times it actually does make sense to put online readonly.

View on HN

Yeah, but as demonstrated here, you should not trust that these devices have anywhere near the level of hardening to be exposed to the internet, even if it is notionally read-only. You need a VPN or similar at a bare minimum.

I've seen an old-school device that simply auto-dials various telephone numbers when a temperature alarm goes off or the power goes out. It doesn't accept incoming calls.

It means someone has to physically go in... So a classic security vs. convenience trade-off.

Probably sending a page, like to old school pagers. Though I'm not sure if people actually use pagers on the receiving end. If you sniff POCSAG radio traffic with an SDR a good amount of the traffic are alerts from various industrial sensors

Reply on news.ycombinator.com